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SYSTEM AND METHOD FOR PURCHASING GOODS AND SERVICES 
This is a continuation-in-part of Serial No. 08/700,861 file August 21, 
1996, allowed, the disclosures of which are incorporated by reference herein. 

BACKGROUND OF THE INVENTION 
Field of the Invention 

The present invention relates to systems and methods for conducting 
financial transactions, and in particular, utilizing the Internet, including the 
World-Wide Web, and the public telephone system. 

Background Art 

The telephone system in place in this country offers a service which 
identifies to a called party the telephone number of the calling party. This service 
is robust, secure, and to the best of Applicant's knowledge, always correct. This 
service has been used by computerized information systems for many years in the 
field of customer care and customer assistance to provide, for example, a 
customer care representative with records associated with the calling party. Such 
systems have reduced the need for a called party to make extensive inquiries 
from the calling party. Other systems presently in use allow a caller to 
automatically activate a new credit-card by calling from the caller's home 
telephone and by inputting with the telephone's touch-tone keypad the caller's 
social security number or other identification presumably known only by the 
caller and the called party. 

Many systems are presently in place to provide telephonic shopping for 
goods and services as an alternative to physical presence in a store. For example, 
customers often use a paper catalog for selection of goods and use a telephone for 
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placing orders and for paying for orders. While this method of shopping can be 
convenient, it involves printing and distribution costs associated with the paper 
catalogs as well as costs associated with a call-handling center. For the shopper, 
each purchase requires a separate transaction with the particular merchant 
5 involved. A shopper cannot browse several catalogs, cannot choose a number of 

items for purchase and make a single call to central number to complete the 
entire purchase transaction. For each separate purchase, there is a requirement 
for providing shipping and billing information. Additionally, a paper catalog is 
more limited than an Internet-based catalog in the amount of information it can 

10 present to a customer. 

Increasingly, merchants are selling goods and services on the World- 
Wide Web (WWW). However, although the Web is ideal for browsing, online 
transactions are not secure over a public network. Even with the available 
encryption systems, customers are wary of transmitting their credit card numbers, 

15 since the credit card information will be passed from node to node and therefore 

will be subject to interception at multiple points. There is a need for transactions 
to be made more safely and conveniently while maintaining the convenience of 
browsing the WWW. 

To the best of Applicant's knowledge, in all present methods of 

20 purchasing goods and services using the Internet, one of the following is true: the 

customer is required to transmit sensitive financial information over a non-secure 
medium; the customer is required to memorize a password or other secret code; 
the customer is required to note the merchant's telephone number to call; the 
customer is required to provide shipping and billing information; the customer is 

25 required to complete each purchase transaction with each merchant separately 

and independently of the customer's transactions with other merchants. Any one 
of the requirements is alone limiting. Furthermore, the repetitive burden of 
providing billing and shipping information to more than one merchant is a source 
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of errors, frustration, and lost sales. 

In summary, paper catalog sales are generally regarded as being safe, but 
suffer from the lack of features which are provided by the Internet, namely 
browsing of extensive information, instant access to cross-referenced items, 
5 increased number of items available for selection, reduced cost of catalog 
distribution, and other conveniences. 

A basic electronic commerce system 100 using the Internet is shown in 
Figure 1. A user's computer, 1 1, is connected using a network connection to the 
Internet, 12, to a merchant's web server, 40, connected to the Internet by a 
10 network connection, 42. The user's computer displays the merchant's web page 

20, on its display, 10. The user selects items for purchase by clicking on 
appropriate links and buttons on the merchant's web page. As items are selected 
by the user, the web server adds the selected items to a database, 43, connected to 
the web server, 40, by a private network link, 45. This system, 100, is in use by a 

15 number of online stores. To purchase the selected items, the user enters personal 

information such as shipping address and name in an input area 23 of the web 
page, and financial information such as a credit-card number, in an area 21, for 
use by the merchant's web server, 40. When user clicks on a button, 22, to 
indicate the desire to purchase the selected items, the financial information, 21, is 

20 transmitted to the web server, 40, using the Internet connection, 12, and the 

Internet connection, 42. The web server, 40, associates the financial information, 

21, with the selected items in the database, 43, creates a sales record, connects to 
a merchant financial transaction center, 60, using a link, 65, which uses either the 
Internet or a private network, for authorization of the transaction, and, upon 

25 approval, confirms the sales record in the database, 43. 

At this point, the selected items have been purchased and can be delivered 
to the user. The selection sub-system, 100, together with the financial transaction 
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center, 60, comprise an electronic commerce system. 

U.S. Patent No. 5,677,955, hereinafter "Doggett '955", discloses a system 
for Internet transactions. Doggett '955 discloses the use of cryptography to 
increase the security of messages transmitted over the Internet between a buyer 
5 and merchant of goods and between a merchant and a buyer's financial 
institution. 

Rose et al.'s U.S. Patent 5,757,917, hereinafter "Rose '917", teaches an 

improvement on previous purchasing systems by suggesting the use of E-mail as 

means for confirming the customer's intent to purchase goods and services and 
10 also as means for verifying the identity of the customer. Rose '917 relies on 

E-mail, which is generally not considered a secure means of communication. 

First Virtual Holdings, Inc., hereinafter, "FVH", is the assignee of Rose 

'917. FVH operated a members-only payment system wherein a "VirtualPIN" 

was assigned to its members. Merchants affiliated with the transaction center 
15 accepted a member customer's "VirtualPIN" in lieu of a credit-card number and 

contacted FVH to translate the customer's alias into a credit-card number and 

payment authorization. 

The Internet is an ever-increasingly popular tool for consumers to get 

information on goods and services, to make comparisons between different 
20 products from different companies, and to browse catalogs and on-line stores. 

Electronic commerce is hindered by the lack of security inherent in the Internet's 

design and infrastructure. 

The Internet has disadvantages. It is considered by knowledgeable 

persons not to be adequately secure. Use of the Internet typically requires a PC 
25 and appropriate software. While most PC users have the basic requirements for 

accessing Internet stores, electronic commerce solutions on the market today 

require users to install additional software, such as an electronic wallet or 

electronic transaction assistant. 
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Users of the Internet typically establish a connection to the Internet using 
a PC and use a web browsing software called a "browser." A session on the 
Internet is the period from when a connection to the Internet is established to 
when that connection is terminated. 
5 Cryptographic techniques have been the predominant solution offered to 

solve the security problem of transactions conducted using the Internet. 

SUMMARY OF THE INVENTION 

Accordingly, one object of the present invention is to improve the 
security of transactions which use the Internet. 
1 0 Another object of the invention is to simplify selection of goods and 

services from a plurality of merchants by using the Internet. 

Another object of the invention is to reduce the need for modification of 
the purchaser's PC through the addition of hardware or software beyond a 
connection to the Internet and a web-browser. 
1 5 Another object of the present invention is to simplify the process of 

purchasing goods and services by using the Internet. 

Another object of the present invention is to reduce the need for 
cryptography in such transactions. 

One aspect of the invention provides a method and system for allowing a 
20 customer to select an item for purchase without actually purchasing that item 
until the customer makes a telephone call from the customer's registered 
telephone number, typically a home or office number, and explicitly makes a 
choice to approve purchase of the selected item. The present invention allows a 
customer to make a plurality of selections from a plurality of merchants and still 
25 conclude the plurality of purchases with a single telephone call. 

According to another aspect, the invention is directed to a method and 
system for carrying out a commercial transaction using a public network, such as 
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the Internet, in combination with a secure dial-up network, such as the public 
telephone system. Each network offers certain advantages and disadvantages. 
The present invention teaches a process which integrates the advantages of the 
two networks and results in non-obvious and unexpected results. The present 
5 invention relies on the recognition that certain elements of a transaction are not 

sensitive and may be communicated over the Internet, while other elements are 
sensitive and need to be communicated in a secret and secure manner. The non- 
sensitive elements are communicated using the Internet, which is an inherently 
less expensive medium to use. The sensitive information is communicated using 

10 a standard telephone, which provides a one-to-one private connection. The 

telephone company's subscriber identification service can be used to identify 
with sufficient certainty the telephone number of the calling party. The 
subscriber identification service is well-known in this country as CallerlD and is 
hereinafter referred to as "CallerlD". 

15 A further aspect of the invention relates to a data processing and 

communications system as shown and described herein. 

Technology for integration of telephone systems with automated voice- 
response systems is well-known and familiar to both implementers of such 
systems and the users of such systems. 

20 A first advantage of the invention is that a third party, namely a 

transaction center, is utilized for the financial processing of the transaction, 
whereby all need for the merchant to have the customer's credit card information 
may be eliminated. 

According to a second advantage of the invention, if it is desired for the 

25 merchant to receive the credit card information, that information can be 

transmitted directly to the merchant from a central office, over a single link, 
which is more secure than the information being transferred between multiple 
nodes over the Internet. 
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Another advantage of the present invention is that it simplifies the process 
of purchasing goods and services by using the Internet. 

Another advantage of the present invention is that it reduces the 
dependency on cryptographic technology for the transmission of financial 
5 information related to the transaction. 

Another advantage of the present invention is that it provides protection 
against computer viruses, sometimes referred to as "Trojan Horses" running on 
the purchaser's computer, which are typically used to steal passwords, credit card 
numbers, and other sensitive information. 
10 Another advantage of the invention is that it reduces the need for 

modification of the purchaser's PC through the addition of hardware or software 
beyond a connection to the Internet and a web-browser. 

Another advantage of the present invention is that a plurality of 
transactions can be completed with a single telephone call. 
1 5 Another advantage of the present invention is that a plurality of items 

from a plurality of merchants can be selected for a future purchase decision 
within a single session on the Internet. 

Another advantage of the present invention is that a plurality of items 
from a plurality of merchants can be selected separately from the transaction in 
20 which those items are purchased. 

Another advantage of the present invention is that the customer needs to 
remember only a single well-known telephone number. This number is typically 
the customer's home or office telephone number. 

Other objects, features and advantages of the present invention will 
25 become apparent from the following description of several embodiments of the 

invention which refers to the accompanying drawings. 

BRIEF DESCRIPTION OF THE DRAWINGS 
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For a fuller understanding of the invention, reference is had to the 
following description taken in connection with the accompanying drawings, in 
which: 

Figure 1 is a system architecture block diagram of an exemplary prior art 
5 electronic shopping system. 

Figure 2 is a system architecture block diagram of an exemplary system 
embodying the present invention. 

Figure 3 is a schematic diagram illustrating the steps in a method 
according to several embodiments of the invention. 

10 

DETAILED DESCRIPTION OF EMBODIMENTS OF THE INVENTION 
Reference is first made to Fig. 2 which depicts a secure transaction 
system in which, a transaction center, 60, has a quasi-public network link, 63, a 
secure link, 66, to a merchant, 48. The quasi-public network is, for example, the 

15 Internet. The merchant, 48, has a secure internal link, 44, to its data storage and 

computer systems, 43, which are linked also to its web server, 40, through a 
secure link, 45. The transaction center 60 has equipment for sending and 
receiving voice and data on a link, 75, connected to a telephone device with 
CallerlD capabilities, 70, and equipment for communicating caller identification 

20 information to the transaction center, 60. The telephone device, 70 is linked to a 

central office, 200, by a link, 80. The central office, 200, is connected to a 
subscriber, 300, by a link, 81. 

In one embodiment of the present invention, the transaction center 
receives from the merchant's web-server, 40, a purchase set, 68, of goods and 

25 services selected by a customer for purchase from the merchant and stores it in a 

database 67. The purchase set lists the goods and services selected by the 
customer on the web-site, and also includes the customer's telephone number as 
entered on the merchant's web-site for identification purposes by the customer. 
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The transaction center saves received purchase sets for a period of time 
specified by the merchant or for a period of time specified by the customer 
associated with the telephone number associated with the purchase set, 
whichever lifetime period is shorter. The transaction center can also associate 
5 certain rules such as discounts or additional advantages for the customer to be 

applied under specified conditions, such as the completion of the purchase by the 
customer within the lifetime period of the purchase set. 

The transaction center has the telephone device, 70, for answering an 
incoming telephone call and for identifying the caller's telephone number prior to 

10 answering the telephone. This capability is a feature of the CallerlD service 

offered by telephone companies in this country. The transaction center is 
equipped, via the link 75, for communicating with voice and data using the 
telephony device, 70. The transaction center 60 is also equipped for looking up 
purchase sets associated with the caller's telephone number. If the caller is 

15 identified as a registered customer, any purchase sets can be read to the customer 

over the telephone using a text-to-speech system or displayed to the caller on a 
display if the caller is using a modem connection and a display device. If the 
caller is not identified as a customer, then the system can respond appropriately, 
for example, by informing the caller of the fact and offering to allow the caller to 

20 become a registered customer. 

The web-server, 40, receives input from a customer indicating the goods 
and services to be placed in a purchase set and receives a telephone number, 500, 
from the customer as an identifier to be associated with the customer's purchase 
set. The web-server, 40, communicates the purchase set and the associated 

25 telephone number, 500, to the transaction center using link, 42. Note that no 

other piece of information is required from the customer and that the required 
information need not be communicated securely for customers with listed 
telephone numbers nor for customers with unlisted telephone numbers who 
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nevertheless do not object to having their telephone number communicated on 
Internet links, 42 and 12. Further note that the purchase set is also not sensitive 
information and can be communicated to the transaction center using the Internet 
link, 42. The purchase set and the telephone number are not sensitive because 
5 they cannot be used for theft or profit to the disadvantage or harm of the 

customer or merchant or transaction center. 

If the caller is verified and allowed to approve purchase items, then the 
customer is prompted to create a purchase instruction set, 69, by giving a 
purchase instruction for each purchase item. A purchase instruction will specify 

10 payment authorization for an item, thereby moving that item into a paid set, 62, 

reject payment for an item, thereby removing the item from the purchase list, or 
defer a decision on an item, thereby keeping the item on the purchase list. 

As noted earlier, if the lifetime of a purchase list expires, then the 
purchase list is removed. Three embodiments of the invention are disclosed 

15 herein. The disclosed embodiments have in common an initial registration step, 

in which a customer registers one or more credit-cards with a central office, 
which will be referred to herein as the transaction center. The registration can be 
made over the telephone, 70, or by a written application, and therefore is secure. 
The primary feature of the registered information is a registered telephone 

20 number. The registered information may include a preferred shipping address 

such as the customer's home. In the registration process, the transaction center 
can verify the source of the registered telephone number by the use of the 
telephone system's CallerlD function. 

An alternate telephone number can be accepted if the customer is not 

25 calling from the number that is desired to be registered. In that case, or if desired 

for any other reason, a human operator at the transaction center can call back the 
registrant and/or request additional identification information before accepting 
the registration information. 
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The registration information may include a name to be used for 
identification (not necessarily the name on the credit cards), credit card 
information, telephone number, shipping address, optional PIN, preferred 
approval method, self-imposed credit limit, e-mail address, alternate name used 
5 by the customer, statement mailing address, or credit-card preference list. 

Reference is next made to Fig. 3 which shows schematically the steps 
involved in a transaction according to a first embodiment of the invention. For 
clarity, additional references are made to Fig 2. 

When shopping, the customer browses for goods and services using a 
1 0 public network (the Internet or World-Wide Web). 

In step 1, the customer 1000 selects the goods or services to be purchased 
and identifies himself by registered name and telephone number. The customer 
optionally may give additional information such as an alternate shipping address, 
a method of credit approval, or a purchase set expiration time different from that 
1 5 supplied by the merchant or by the transaction center. 

In step 2, the merchant, 400, then delivers a purchase number together 
with a merchant number to the transaction center 600 by E-mail, phone, or 
another means, for example on a purchase set addressed to the transaction center. 
The invoice may have a stated lifetime which may be supplied by the merchant 
20 or by the customers information registered with the transaction center. The 

purchase set may include the buyer's registered name (not necessarily his real 
name), the merchant's name and identification number, a list of items being 
purchased together with the price of each, a total price, an expiration time, or 
optional attachments for the merchant's use. The purchase set is delivered to the 
25 transaction center, 600, along with the telephone number, 500, supplied by the 

customer to the merchant. 

In step 3, to complete the sale, the customer accesses the transaction 
center using a phone or a modem. The customer is identified by the telephone 
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company's CallerlD function optionally plus a personal identification number 
(PIN) and/or other registered information for extra security. If the customer's 
telephone number on file with the transaction center does not match the 
telephone number detected by CallerlD, an operator will ask the customer for 
5 further identifying information. 

Upon recognizing the customer, the transaction center lists all 
outstanding purchase sets and gives the customer the opportunity to make a 
selection and thereby express intent to complete the sale. This step may be 
realized using an automated voice-response system which reacts to touch-tone 

10 telephone tones or one that reacts to human speech. The use of automated voice- 
response systems in customer help and, for example, airline ticketing 
applications, is well-known. The transaction center logs the customer's 
selections. When the mode of interaction is voice, a transaction representative 
will handle the transaction through human conversation. When the mode of 

15 interaction is through a voice response unit, the buyer will use the telephone 

keypad to respond to the choices presented by the system. The choices will 
allow the buyer to select the purchase set(s) to be paid or canceled, and the credit 
card(s) to be used. When the mode of interaction is through a programmed 
computer using a modem, the decisions are entered using the keyboard and/or 

20 mouse. 

In step 4, the transaction center sends an E-mail message to the customer 
to confirm the invoices and payments that the customer has approved. 

Then, in step 5, the transaction center debits the customer's pre-registered 
credit-card and credits the merchant over a standard private credit-card 
25 transaction system. The transaction center also sends an acknowledgment of the 

acceptance of the sale and of the credit to the merchant by phone, E-mail, or 
another means. The acknowledgment sent to the merchant includes the buyer's 
shipping address and possibly other delivery information as specified by the 
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customer during the registration process or during the process of approving 
purchase set items. 

A second embodiment differs from the first embodiment in that in step 3, 
the transaction center can itself initiate confirmation of the sale by sending an E- 
5 mail message or placing a telephone call to the customer upon receipt of the sale 

information or invoice from the merchant. An advantage of this embodiment is 
that it more securely confirms the identity of the customer and the fact that the 
sale is authorized. It also reminds the customer that the sale is pending and 
encourages the customer to complete the sale. 
10 The customer can be given control over whether it is the customer or the 

transaction center who makes the telephone or modem contact in step 3 to 
complete the sale. The party who will make the contact can be specified either 
on the transaction application, for all sales, or on the merchant's form for a given 
sale. 

15 In step 5, in a third embodiment of the invention, the transaction center 

can deliver the customer's credit card information securely to the merchant upon 
receipt of the customer's approval of the sale. As an additional security 
precaution, the transaction center can confirm to the customer by E-mail or 
another channel that the customer's information has been sent to the merchant. 

20 An advantage of this embodiment is that the transaction center is not required to 

have access to the conventional banking channels. 

The transaction center can communicate the purchaser's financial 
information to the merchant using a modem and a telephone connection, or using 
digital certificates and an Internet connection. The transaction center can 

25 communicate the purchaser's financial information to the merchant's bank or 

conduct a banking transaction on behalf of the purchaser by using a modem and a 
telephone connection, or by using digital certificates and an Internet connection. 
The transaction center can communicate the purchaser's financial information 
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certificate to the purchaser's bank or purchaser's credit-card account, again, by 
phone or by digital certificates. 

Other well-known communication links can be used. Other well-known 
encryption methods can be used. 
5 It will thus be seen that the objects set forth above, among those made 

apparent from the preceding description, are efficiently attained and, since 
certain changes may be made in carrying out the above methods and in the 
systems set forth without departing from the spirit and scope of the invention, 
it is intended that all matter contained in the above description and shown in the 
10 accompanying drawings shall be interpreted as illustrative and not in a limiting 

sense. Although the present invention has been described in relation to particular 
embodiments thereof, many other variations, equivalents, modifications and 
other uses will become apparent to those skilled in the art. Therefore, the present 
invention is not limited by the specific disclosure herein. 
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